Privacy
What this site sends, and where.
The services this website contacts are listed below.
How website analytics works
- Google Analytics loads on public pages by default and records page views using analytics cookies.
- No tag-manager container, session recorder, heatmap or advertising pixel.
- No hosted fonts — the type you are reading is already on your device.
- The only permitted third-party scripts are the waitlist bot check and Google Analytics.
- You can turn off analytics cookies below. Measurement continues using cookieless Google Analytics page-view pings.
The homepage requests the public AtMem star count from GitHub. GitHub receives your browser's request; the count is omitted if the request fails.
Google Analytics and your cookie choice
On public pages, Google Analytics is enabled by default and uses first-party analytics cookies unless you turn those cookies off. The cookies used by the current setup are _ga and _ga_12FLX376F2; they distinguish a browser and retain analytics state. Google receives the page path and normal network/device information. This is not anonymous collection. We do not send form contents, email addresses, search terms, URL queries or fragments.
We store your cookie preference in this browser's local storage, not in an analytics cookie, for up to 180 days. When analytics cookies are enabled, they are configured for up to 180 days. A link to these controls appears at the bottom of public pages.
Google Analytics user- and event-level data retention is set to 14 months, with the user-data retention period reset by new activity. Standard aggregated reports are not subject to that retention limit. Enhanced measurement and Google Signals are disabled; advertising consent stays denied.
For questions or deletion requests, contact hello@atmem.ai. No analytics is used on private administrator pages or in the local AtMem and AtFlows dashboards through this website integration.
Every origin this site can contact
This table is generated from the reviewed origin allowlist. Build checks and the site's Content Security Policy constrain external resources; the timing controls below show when they load.
| Origin | Why | Where | When |
|---|---|---|---|
| https://www.googletagmanager.com | Serves the Google Analytics tag on public pages; consent mode disables analytics cookies after opt-out. No Tag Manager container is used. | public-pages | When you open a public page |
| https://www.google-analytics.com | Receives page-view measurements without form values or URL queries; after cookie opt-out, Google receives cookieless measurements. | public-pages | When you open a public page |
| https://region1.google-analytics.com | Receives regional Google Analytics measurements; after cookie opt-out, Google receives cookieless measurements. | public-pages | When you open a public page |
| https://api.github.com | Shows the current public GitHub star count for AtMem on the homepage. | / | When you open a public page |
| https://scholar.google.com | Opens Javad Taghia's public publication record and individual citation entries when a reader follows a research link. | /people/javad-taghia | Only once you start filling in the form |
| https://huggingface.co | Opens public research articles, datasets, models, benchmarks and the AtMem evidence Space when a reader follows a link. | /people/javad-taghia | Only once you start filling in the form |
| https://www.linkedin.com | Opens Javad Taghia's public professional and academic profile when a reader follows the profile link. | /people/javad-taghia | Only once you start filling in the form |
| https://x.com | Opens the public Javad Taghia or AtMem research account when a reader follows a social profile link. | /people/javad-taghia | Only once you start filling in the form |
| https://firestore.googleapis.com | Stores your waitlist submission. | /waitlist | Only when you press submit |
| https://content-firebaseappcheck.googleapis.com | Exchanges the reCAPTCHA Enterprise verification for a Firebase App Check token before a waitlist write. | /waitlist | Only once you start filling in the form |
| https://firebaseappcheck.googleapis.com | Confirms the submission came from this website and not an automated client. | /waitlist | Only once you start filling in the form |
| https://www.google.com | Runs Google's reCAPTCHA check that the submission is not automated. Loads only once you start filling in the form. | /waitlist | Only once you start filling in the form |
| https://www.gstatic.com | Serves the reCAPTCHA code itself. Loads only once you start filling in the form. | /waitlist | Only once you start filling in the form |
Additionally, the private administration page at /admin uses https://identitytoolkit.googleapis.com to sign administrators in. No public page contacts it.
If you join the waitlist
- What we store in your waitlist entry: your email address, optional name and note, submission and expiry timestamps, and a site-waitlist source label. The entry does not include your IP address or a device fingerprint. The separate Google services described here receive normal network information.
- Where: Google Firestore, in the Firebase project behind this site.
- Who can read it: two named administrators. This is enforced by database rules, not by hiding a page — an unauthorised account is refused by the server, not by the browser.
- What we use it for: telling you what we build next. Nothing is sold, shared or passed to an email marketing service.
- How long: 24 months from submission if nothing comes of it, then deleted automatically.
- Removal: email hello@atmem.ai and we will remove it within 30 days. That is a person doing it, not an automated process.
The bot check
The waitlist form is open to anyone, with no account. That makes it a target for automated submissions, so Google reCAPTCHA checks each submission through Firebase App Check.
This bot-check script is separate from Google Analytics. It loads on the waitlist page only, and only once you start filling in the form — not when you open the page. Google may use its own cookies or browser storage for this check even if you decline analytics. Google receives the information reCAPTCHA needs to make that judgement, and is subject to its own privacy terms. We use its answer for one thing: accepting or rejecting the submission.
Something here not matching what you observe? Tell us athello@atmem.ai — a mismatch between this page and the site's behaviour is a bug we treat as serious.